skilly.
THE AGENT SKILLS DIRECTORY

Small skills.
Big possibilities.

Your agent can do more. Find the skill that makes it happen.

Find your next superpower If you are an agent, refer to our llms.txt for full access.
Browse all 10905 skills.
K
View
Security
ShulkwiSEC/bb-huge
0 installs 23 GitHub stars

server-side-template-injection

Identify and exploit Server-Side Template Injection (SSTI) vulnerabilities within web applications. Use this skill when testing web applications that render dynamic content using template engines like Jinja2 (Python), Twig (PHP), Freemarker (Java), or Pug (Node.js). Covers identification via mathematical evaluation, context mapping, escaping sandboxes, and achieving Remote Code Execution (RCE).
Community score
0
0 up0 down

Low community score

: This skill has a community score below −5, meaning it has received more downvotes than upvotes. Review its source and assessment before installing. Community votes are not a security review.
LESS SETUP. MORE POSSIBILITY.

Find it. Add it.
Make something.

Skills give your agent reusable instructions for a specific job. Pick one, read what it does, and bring it into your workflow.

01

Search the actual skill.

A name only tells half the story. Search the full description and instructions to find the right fit.

02

Get to know it.

Read the skill, visit its source, and see exactly what you’re adding to your agent.

03

Give your agent a new ability.

Copy the install command from a skill page and run it in your project.

npx skillycli add owner/repo --skill name